57
Authentik vs Authelia? (lemmy.world)
submitted 1 year ago by to c/selfhosted@lemmy.world
24 comments fedilink hide all child comments
 

I'm currently using Authelia to authenticate for some of my self hosted services. It works fine, but the limited user backends (ldap or... yaml??) make me want to look for an alternative.

Authentik seems good, but after looking at their website I get the feeling of imminent enshitification, where they're going to either pull the rug on the open source version, or basically gatekeep essential features behind an enterprise license.

So, for those using Authentik, how has your experience been so far?

you are viewing a single comment's thread
view the rest of the comments
[–] 5 points 1 year ago (2 children)

Why don't you like LDAP? OpenLDAP is a PITA (necessarily, I guess, to be considered "enterprise"), but lldap has been pretty nice to me. I mean, it's the identity protocol, it's just that the server software has been complex until relatively recently.

What would you use instead? A SQL DB with some custom schema, that just re-invents LDAP?

  • permalink
  • fedilink
  • source
  • hideshow 2 child comments
    •
  • [–] 1 point 1 year ago (1 child)

    LDAP and ldaps are not great from a security perspective. They pass password though the application which means a single compromised app will create a full breach.

    Better to use OpenID which uses a single sign on portal that tells the underlying app when authentication is successful. It has a much smaller attack surface and allows for much more flexibility.

  • permalink
  • fedilink
  • source
  • parent
  • hideshow 1 child comment
    •